Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/d_m5om9Eg6XvKdW7XeZIqn8-BLg.roa
File: d_m5om9Eg6XvKdW7XeZIqn8-BLg.roa (raw, json)
Hash identifier: aV/wJa08dR1AdkBBTjInVUkIBkJKMxX+/vOd6B0pw8s=
Subject key identifier: 77:F9:B9:A2:6F:44:83:A5:EF:29:D5:BB:5D:E6:48:AA:7F:3E:04:B8
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 018CC795519233FE0FF40EDCE83D2A75D71E
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/d_m5om9Eg6XvKdW7XeZIqn8-BLg.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60654
IP address blocks: 195.5.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:51:92:33:fe:0f:f4:0e:dc:e8:3d:2a:75:d7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77f9b9a26f4483a5ef29d5bb5de648aa7f3e04b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:b2:b8:c9:d2:47:13:af:5c:3f:eb:6e:e1:
98:0e:26:41:f8:74:59:ff:29:e9:30:aa:d9:0a:df:
07:d2:69:fd:13:69:1e:2c:52:10:f2:4e:8e:05:a8:
41:eb:3c:bd:6f:21:dd:9d:b9:f0:cd:ae:fe:3f:ad:
46:09:ce:42:13:81:61:96:09:6c:7a:85:fd:7e:ae:
55:20:95:ea:84:b9:52:51:a5:f3:39:9e:8d:aa:5a:
49:b2:00:1d:cc:b2:f7:ad:71:54:ad:b8:86:3e:0a:
1c:b3:37:90:99:f6:64:fb:31:24:7f:d4:3e:ce:19:
c0:e0:9e:6d:23:b6:32:dc:79:e3:b0:08:8f:f8:b8:
5a:a1:35:bb:95:b6:2b:ff:cb:c2:3d:98:d3:a5:43:
0c:34:f5:ed:2d:4f:60:80:e8:11:da:97:97:7b:90:
0f:eb:72:7b:6e:9a:e4:4b:9f:78:de:a4:2c:d9:2d:
eb:02:cc:c5:33:11:eb:36:35:78:43:88:ee:b7:77:
4c:35:e7:7e:67:b0:73:8d:9a:9c:1b:b9:f4:59:64:
51:20:43:67:b0:c6:15:7f:52:25:72:e8:47:da:49:
63:08:27:f9:70:25:d7:ad:ff:20:88:f9:4d:40:2c:
2e:c5:e4:44:b6:b7:03:47:6c:fb:9d:2a:0c:3b:be:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:B9:A2:6F:44:83:A5:EF:29:D5:BB:5D:E6:48:AA:7F:3E:04:B8
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/d_m5om9Eg6XvKdW7XeZIqn8-BLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cf:94:30:c2:f6:5c:26:28:c4:81:c1:d7:7a:99:57:a4:00:
15:2d:de:1c:26:ad:e7:40:0c:0d:bf:c4:ba:19:45:a2:4a:ad:
13:66:6a:2a:c5:fa:77:ac:6b:c6:37:d9:d2:22:f0:a1:43:66:
5e:30:84:d9:79:6d:2b:38:42:3c:29:42:9f:d7:15:ac:ce:dd:
d2:19:5a:d2:ff:2d:6e:00:0b:b8:1d:07:69:24:96:14:ff:47:
4d:a7:bd:d9:b2:93:31:5d:05:2d:b7:04:e7:93:0f:8b:a4:8a:
89:e6:a1:5a:4f:93:e4:47:c3:b8:3b:59:8e:74:e5:47:42:5b:
68:59:12:1c:9c:16:38:be:96:94:d8:4a:6e:d9:86:db:4a:d0:
30:35:e5:0b:6d:62:da:1a:6f:db:df:ec:42:82:45:66:6c:25:
a1:93:bf:c6:12:9e:d7:9f:0e:b8:c9:2d:69:a2:f5:54:7f:f9:
6e:40:0b:b0:52:2b:c0:48:f5:55:18:46:98:4d:92:f2:0f:ad:
6e:9d:e5:9a:cf:57:dd:28:36:8e:50:0b:5c:aa:11:0d:9e:f7:
92:6b:f7:f4:39:e9:b1:b1:22:8a:f5:6a:e2:62:0d:71:76:8d:
de:f1:cf:f3:43:9b:1d:35:57:ab:6a:18:fb:a7:6e:17:e7:99:
20:b4:ff:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:30:54 2024 by rpki-client on console-ams.rpki-client.org